What are possible Automatic Reactions in SmartEvent?
What are possible Automatic Reactions in SmartEvent?
Possible Automatic Reactions in SmartEvent include options such as Mail, SNMP Trap, Block Source, Block Event Activity, and External Script. These reactions help administrators to respond to security events by sending notifications, blocking suspicious activities, and executing custom scripts.
correct types of Automatic Reactions: Mail - Tell an administrator by email that the event occurred. See Creating a Mail Reaction. Block Source - Instruct the Security GatewayClosed to block the source IP address from which this event was detected for a configurable timeframe . Select a timeframe from one minute to more than three weeks. See Creating a Block Source Reaction. Block Event activity - Instruct the Security Gateway to block a distributed attack that emanates from multiple sources, or attacks multiple destinations for a configurable timeframe. Select a timeframe from one minute to more than three weeks). See Creating a Block Event Activity Reaction. External Script - Run a script that you provide. See Creating an External Script Automatic Reaction to write a script that can exploit SmartEvent data. SNMP Trap - Generate an SNMP Trap. See Creating an SNMP Trap Reaction.